CVE-2020-11655
High
Description
SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Sqlite
PublishedApr 9, 2020
First seenApr 9, 2020
How to fix
Update
- siemens sinec_infrastructure_network_services1.0.1.1 or later
- tenable tenable.sc5.19.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sqlite sqlite | v ≤ 3.31.1 | — |
| netapp ontap_select_deploy_administration_utility | No range specified | — |
| debian debian_linux | 8.0, 9.0 | — |
| canonical ubuntu_linux | 16.04, 18.04, 19.10, 20.04 | — |
| oracle communications_element_manager | 8.2.0 ≤ v ≤ 8.2.2 | — |
| oracle communications_network_charging_and_control | 12.0.0 ≤ v ≤ 12.0.3, 6.0.1, 12.0.2 | — |
| oracle communications_session_report_manager | 8.2.0 ≤ v ≤ 8.2.2 | — |
| oracle communications_session_route_manager | 8.2.0 ≤ v ≤ 8.2.2 | — |
| oracle enterprise_manager_ops_center | 12.4.0.0 | — |
| oracle hyperion_infrastructure_technology | 11.1.2.4 | — |
| oracle instantis_enterprisetrack | 17.1, 17.2, 17.3 | — |
| oracle mysql | 8.0.0 ≤ v ≤ 8.0.22 | — |
| oracle mysql_workbench | v ≤ 8.0.22 | — |
| oracle outside_in_technology | 8.5.4, 8.5.5 | — |
| oracle zfs_storage_appliance_kit | 8.8 | — |
| oracle communications_messaging_server | 8.1 | — |
| siemens sinec_infrastructure_network_services | v < 1.0.1.1 | 1.0.1.1 |
| tenable tenable.sc | v < 5.19.0 | 5.19.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.